
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vZ8LO2qI-N3EhJWOmbRRKz__RAk.roa
File: vZ8LO2qI-N3EhJWOmbRRKz__RAk.roa (raw, json)
Hash identifier: N7rfI1ph1Huzg8D0nvDZa1Q+2LvAtpgaNJkqdlJMF5c=
Subject key identifier: BD:9F:0B:3B:6A:88:F8:DD:C4:84:95:8E:99:B4:51:2B:3F:FF:44:09
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01BA
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vZ8LO2qI-N3EhJWOmbRRKz__RAk.roa
Signing time: Tue 31 Mar 2026 07:53:58 +0000
ROA not before: Tue 31 Mar 2026 07:53:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 211.14.134.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BD9F0B3B6A88F8DDC484958E99B4512B3FFF4409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:77:c3:06:49:6b:26:15:e2:e5:61:03:61:
31:d1:a1:a8:9f:c4:99:3d:67:a6:49:01:ac:95:60:
77:56:f9:09:08:04:23:cf:ef:ee:38:cc:5c:30:6c:
0f:58:78:49:c1:0b:3b:0a:5a:3a:d2:fe:fc:d2:00:
11:84:05:b1:7f:11:14:f1:49:08:48:10:8e:01:e8:
d6:45:11:cc:77:1d:3b:b5:fc:e4:dc:96:46:5c:ea:
36:e4:9a:7a:84:f7:82:02:d0:28:1a:9d:dd:11:9f:
27:ca:1d:b8:d6:56:4b:c9:b3:b5:e0:55:74:4e:79:
c7:27:8a:e1:a0:00:dd:99:d3:b6:98:39:fa:39:2a:
90:76:21:88:7d:dd:f7:1d:e4:57:4c:6b:9e:91:6a:
84:9f:00:2e:fb:71:a6:01:04:15:6b:2f:06:cd:6c:
e8:92:26:63:83:dc:c4:01:a3:93:26:78:46:6e:fa:
19:5b:50:b0:0a:89:38:dd:a7:27:9f:6f:5e:39:c7:
71:24:ca:c1:e5:96:68:f9:13:87:54:7e:a3:61:4d:
33:4d:d3:a7:e1:80:03:4b:a4:c9:fc:15:cb:25:b2:
e5:da:b7:d8:bd:b8:0a:ec:bc:48:c7:fb:02:2a:c4:
48:e7:e5:ae:95:f9:ef:47:f8:48:66:b7:25:de:28:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:0B:3B:6A:88:F8:DD:C4:84:95:8E:99:B4:51:2B:3F:FF:44:09
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vZ8LO2qI-N3EhJWOmbRRKz__RAk.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e1:30:73:ed:4d:bf:68:a4:e9:37:79:8c:18:ce:5b:3c:fd:
f5:15:b4:01:f9:92:83:6b:e0:02:a0:1c:39:41:c2:ec:de:19:
07:65:c5:ff:9d:f1:bf:cc:37:eb:55:01:df:43:73:15:b7:f0:
d8:0b:9c:f6:0c:50:c7:27:58:0a:50:7d:50:4f:ba:d4:f9:58:
63:d3:89:b8:6b:5c:67:f4:c0:ca:45:8e:ce:4b:04:be:fa:02:
c8:be:bb:45:b7:dc:63:5b:f5:56:9d:cb:7f:fd:1e:9a:e5:5f:
9e:18:d0:a5:cd:49:e1:44:ad:47:8b:6a:4e:1f:14:f0:c5:47:
bf:7d:8a:81:13:7e:91:3c:48:30:f5:6d:f7:6c:c7:df:40:0c:
5c:56:cb:36:2e:33:b9:e2:69:f6:08:02:d7:96:b2:d4:30:0b:
c1:cd:54:bc:35:62:d8:90:84:ad:6f:58:ec:c0:2d:9c:97:a2:
04:86:9e:e5:59:9a:c9:40:fa:0c:8c:28:ea:39:84:28:fc:8b:
be:5b:7c:7a:a0:ee:bc:af:5a:dc:f1:c9:2e:ea:82:42:bf:85:
85:dc:ca:19:ae:c3:fc:13:9b:4a:65:14:a3:c0:ee:b6:87:81:
c1:6e:c7:a9:8b:99:21:5e:e7:d0:8a:dc:2a:82:58:c8:e2:e7:
c0:2f:31:d4
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzNThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJEOUYwQjNCNkE4OEY4
RERDNDg0OTU4RTk5QjQ1MTJCM0ZGRjQ0MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcr3fDBklrJhXi5WEDYTHRoaifxJk9Z6ZJAayVYHdW+QkIBCPP
7+44zFwwbA9YeEnBCzsKWjrS/vzSABGEBbF/ERTxSQhIEI4B6NZFEcx3HTu1/OTc
lkZc6jbkmnqE94IC0Cgand0RnyfKHbjWVkvJs7XgVXROeccniuGgAN2Z07aYOfo5
KpB2IYh93fcd5FdMa56RaoSfAC77caYBBBVrLwbNbOiSJmOD3MQBo5MmeEZu+hlb
ULAKiTjdpyefb145x3EkysHllmj5E4dUfqNhTTNN06fhgANLpMn8FcslsuXat9i9
uArsvEjH+wIqxEjn5a6V+e9H+EhmtyXeKCZBAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUvZ8LO2qI+N3EhJWOmbRRKz//RAkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My92WjhMTzJxSS1OM0VoSldPbWJSUkt6X19SQWsucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0w6GMA0GCSqGSIb3DQEBCwUA
A4IBAQAu4TBz7U2/aKTpN3mMGM5bPP31FbQB+ZKDa+ACoBw5QcLs3hkHZcX/nfG/
zDfrVQHfQ3MVt/DYC5z2DFDHJ1gKUH1QT7rU+Vhj04m4a1xn9MDKRY7OSwS++gLI
vrtFt9xjW/VWnct//R6a5V+eGNClzUnhRK1Hi2pOHxTwxUe/fYqBE36RPEgw9W33
bMffQAxcVss2LjO54mn2CALXlrLUMAvBzVS8NWLYkIStb1jswC2cl6IEhp7lWZrJ
QPoMjCjqOYQo/Iu+W3x6oO68r1rc8cku6oJCv4WF3MoZrsP8E5tKZRSjwO62h4HB
bsepi5khXufQitwqgljI4ufALzHU
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:37 2026 by rpki-client